icdev 1.2.20__tar.gz → 1.2.21__tar.gz

{icdev-1.2.20 → icdev-1.2.21}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: icdev
-Version: 1.2.20
+Version: 1.2.21
 Summary: ICDEV™ — Intelligent Certified Development Platform. AI-powered SDLC with NIST 800-53 RMF compliance, multi-agent orchestration, FORGE framework, and ANVIL build workflow.
 Author: Sovanna Chuon
 License-Expression: Apache-2.0

{icdev-1.2.20 → icdev-1.2.21}/icdev/_version.py

@@ -1,3 +1,3 @@
 """ICDEV™ version — single source of truth."""
 
-__version__ = "1.2.20"
+__version__ = "1.2.21"

{icdev-1.2.20 → icdev-1.2.21}/icdev/data/args/achievements_catalog.yaml

@@ -129,3 +129,69 @@ achievements:
       type: portfolio_value
       params:
         threshold_usd: 1000000
+
+  # ─── Options achievements (Phase 7+ complex options + progression) ──
+  first_options_trade:
+    name: "Option Curious"
+    description: "Executed your first paper option trade."
+    icon: "📈"
+    tier: bronze
+    xp_bonus: 25
+    progress_hint: "Visit /options, pick a contract, place a trade."
+    predicate:
+      type: xp_event_count
+      params:
+        reason: option_filled
+        threshold: 1
+
+  first_multileg:
+    name: "Strategist"
+    description: "Executed your first multi-leg option strategy."
+    icon: "🎲"
+    tier: silver
+    xp_bonus: 50
+    progress_hint: "Open a vertical spread or condor from the Strategy Builder."
+    predicate:
+      type: xp_event_count
+      params:
+        reason: option_multileg_executed
+        threshold: 1
+
+  five_multilegs:
+    name: "Spread Specialist"
+    description: "Executed 5 multi-leg option strategies."
+    icon: "🃏"
+    tier: silver
+    xp_bonus: 75
+    progress_hint: "5 strategies through the Strategy Builder."
+    predicate:
+      type: xp_event_count
+      params:
+        reason: option_multileg_executed
+        threshold: 5
+
+  options_profit_hunter:
+    name: "Profit Hunter"
+    description: "Closed 3 option positions profitably."
+    icon: "🎯"
+    tier: silver
+    xp_bonus: 60
+    progress_hint: "Sell_to_close a long option for a gain, 3 times."
+    predicate:
+      type: xp_event_count
+      params:
+        reason: option_profitable_close
+        threshold: 3
+
+  premium_collector:
+    name: "Premium Collector"
+    description: "3 short options expired worthless (you kept the premium)."
+    icon: "💰"
+    tier: gold
+    xp_bonus: 80
+    progress_hint: "Sell_to_open options that expire OTM — the time-decay trade."
+    predicate:
+      type: xp_event_count
+      params:
+        reason: option_expired_worthless_short
+        threshold: 3

{icdev-1.2.20 → icdev-1.2.21}/icdev/data/args/challenges_catalog.yaml

@@ -149,6 +149,93 @@ challenges:
         min_positions: 3
         min_days: 21
 
+  # ─── Phase 7+ options-focused challenges ────────────────────────────
+  options_first_trade:
+    name: "Options 101"
+    description: "Execute your first 3 paper option orders."
+    long_description: >
+      Intro to options. Browse the chain on /options, place any 3
+      option orders in your sandbox (single-leg or legs within a
+      multileg strategy both count).
+    icon: "🎓"
+    difficulty: easy
+    duration_days: 30
+    xp_on_complete: 75
+    predicate:
+      type: options_filled_count
+      params:
+        threshold: 3
+
+  options_vertical_spread:
+    name: "First Vertical"
+    description: "Execute a bull call or bear put spread."
+    long_description: >
+      A vertical spread is your first taste of a multi-leg option
+      strategy. Use /options → Strategy Builder → Bull Call Spread
+      (or Bear Put Spread) to build it.
+    icon: "↕️"
+    difficulty: medium
+    duration_days: 45
+    xp_on_complete: 150
+    predicate:
+      type: options_multileg_count
+      params:
+        threshold: 1
+
+  options_iron_condor:
+    name: "Iron Condor"
+    description: "Execute a 4-leg iron condor strategy."
+    long_description: >
+      Iron condors collect premium when a stock stays in a range.
+      /options → Strategy Builder → Iron Condor. 4 legs, all must
+      fill atomically (the engine auto-reverses on partial failure).
+    icon: "🦅"
+    difficulty: hard
+    duration_days: 60
+    xp_on_complete: 200
+    predicate:
+      type: options_multileg_count
+      params:
+        threshold: 1
+        strategy_name: iron_condor
+
+  options_calendar_master:
+    name: "Calendar Master"
+    description: "Execute a calendar spread (multi-expiry time decay play)."
+    long_description: >
+      Calendar spreads combine options from TWO different expiries
+      at the same strike. Earn time-decay differential. Pick NEAR
+      + FAR expiries in the Strategy Builder when Calendar Spread
+      is selected.
+    icon: "📅"
+    difficulty: hard
+    duration_days: 60
+    xp_on_complete: 200
+    predicate:
+      type: options_multileg_count
+      params:
+        threshold: 1
+        strategy_name: calendar_spread
+
+  options_butterfly_pro:
+    name: "Butterfly Pro"
+    description: "Execute any butterfly (long call, long put, iron, or calendar)."
+    long_description: >
+      Butterflies have a triangular payoff with peak profit at the
+      middle strike. Use the Strategy Builder to pick any butterfly
+      variant — long call butterfly, iron butterfly, or calendar
+      butterfly (the advanced multi-expiry version).
+    icon: "🦋"
+    difficulty: expert
+    duration_days: 90
+    xp_on_complete: 300
+    predicate:
+      type: options_multileg_count
+      params:
+        threshold: 1
+        # Match any of the butterfly strategies via LIKE 'butterfly'
+        strategy_name: butterfly
+
   options_lab:
     name: "Options Lab"
     description: "Open-ended paper options playground — no deadline pressure."

{icdev-1.2.20 → icdev-1.2.21}/icdev/data/args/creative_config.yaml

@@ -263,6 +263,144 @@ trading:
     - AI trading
     - quant trading
 
+# Security Canvas domain — attack simulation, BAS, MITRE ATT&CK, threat modeling
+security_canvas:
+  name: "security design canvas"
+  g2_category_url: "https://www.g2.com/categories/breach-and-attack-simulation-bas"
+  capterra_category_url: "https://www.capterra.com/penetration-testing-software/"
+  trustradius_category_url: "https://www.trustradius.com/security"
+  producthunt_topic: "security"
+  keywords:
+    - attack path
+    - attack graph
+    - breach and attack simulation
+    - BAS
+    - threat modeling
+    - STRIDE
+    - MITRE ATT&CK
+    - adversary emulation
+    - red team automation
+    - purple team
+    - Caldera
+    - AttackIQ
+    - Cymulate
+    - XM Cyber
+    - SafeBreach
+    - Mandiant Security Validation
+    - Stratus Red Team
+    - Atomic Red Team
+    - attack chain
+    - kill chain
+    - blast radius
+    - lateral movement
+    - privilege escalation path
+
+# Observability Canvas domain — detection engineering, SIEM rule authoring, MITRE coverage
+observability_canvas:
+  name: "observability and detection"
+  g2_category_url: "https://www.g2.com/categories/security-information-and-event-management-siem"
+  capterra_category_url: "https://www.capterra.com/siem-software/"
+  trustradius_category_url: "https://www.trustradius.com/security-information-event-management-siem"
+  producthunt_topic: "security"
+  keywords:
+    - detection engineering
+    - Sigma rule
+    - SIEM rule
+    - Splunk SPL
+    - Elastic KQL
+    - Sentinel KQL
+    - MITRE coverage
+    - ATT&CK coverage
+    - attack-navigator
+    - D3FEND
+    - detection coverage
+    - Tidal Cyber
+    - SOC Prime
+    - Panther
+    - Anvilogic
+    - Detection.FYI
+    - hayabusa
+    - chainsaw
+    - SigmaHQ
+    - OpenTelemetry
+    - distributed tracing
+    - detection-as-code
+    - threat hunting
+    - log volume
+    - SIEM cost
+
+# Infrastructure Canvas domain — IaC, Terraform drift, cloud config, pre-apply gates
+infra_canvas:
+  name: "infrastructure as code"
+  g2_category_url: "https://www.g2.com/categories/infrastructure-as-code-iac"
+  capterra_category_url: "https://www.capterra.com/infrastructure-software/"
+  trustradius_category_url: "https://www.trustradius.com/infrastructure-as-code"
+  producthunt_topic: "devtools"
+  keywords:
+    - infrastructure as code
+    - Terraform
+    - OpenTofu
+    - Pulumi
+    - CloudFormation
+    - Spacelift
+    - env0
+    - Firefly
+    - Terrateam
+    - Atlantis
+    - Scalr
+    - tfautomv
+    - tfmigrate
+    - terraform drift
+    - terraform plan
+    - pre-apply gate
+    - CSP drift
+    - cloud drift
+    - config drift
+    - Helm chart
+    - Kustomize
+    - multi-cloud
+    - GovCloud
+    - Azure Government
+    - STIG-hardened
+    - CIS benchmark
+
+# Boundary Canvas domain — ATO boundary, supply chain, cATO, SBOM, FedRAMP 20x
+boundary_canvas:
+  name: "boundary and supply chain"
+  g2_category_url: "https://www.g2.com/categories/grc"
+  capterra_category_url: "https://www.capterra.com/compliance-software/"
+  trustradius_category_url: "https://www.trustradius.com/compliance-management"
+  producthunt_topic: "productivity"
+  keywords:
+    - ATO boundary
+    - authorization boundary
+    - continuous ATO
+    - cATO
+    - POA&M
+    - plan of action
+    - SSP
+    - control narrative
+    - FedRAMP
+    - FedRAMP 20x
+    - CMMC
+    - OSCAL
+    - NIST 800-53
+    - eMASS
+    - Xacta
+    - SBOM
+    - supply chain
+    - SLSA
+    - in-toto
+    - bomber
+    - bomfather
+    - sbom-tool
+    - Anduril Lattice
+    - Palantir Foundry
+    - Second Front
+    - Highside
+    - compliance snapshot
+    - control assessment
+
 # =========================================================================
 # Source Adapters
 # =========================================================================

{icdev-1.2.20 → icdev-1.2.21}/icdev/data/args/genesis_config.yaml

@@ -521,6 +521,21 @@ reflexes:
     promotion_threshold: 0.7  # Oracle confidence threshold for kanban card creation
     config_path: args/awareness_config.yaml  # Full config — probes, gaps, oracle, narrative
 
+  # ── Canvas Indexer (per-canvas /ask GraphRAG freshness) ─────────────────────
+
+  canvas_indexer:
+    enabled: true
+    risk_tier: green
+    schedule: "every 6h"
+    interval_seconds: 21600  # 6 hours — design content changes slowly
+    cooldown_minutes: 120    # Minimum gap between consecutive cycles
+    description: "Canvas KG indexer — re-index PDC/BDC/DDC/ODC/IDC designs into kg_nodes so /ask stays fresh"
+    success_metric:
+      name: canvas_indexer_errors
+      threshold: 0
+      operator: eq  # 0 canvas-level errors means clean cycle
+    canvases: [pdc, bdc, ddc, odc, idc]  # NDC and SDC use other pipelines
+
 # ── Promoter Configuration ───────────────────────────────────────────────────
 
 promoter:

{icdev-1.2.20 → icdev-1.2.21}/icdev/data/args/graduation_criteria.yaml

@@ -69,6 +69,65 @@ criteria:
     description: "You've acknowledged the risks of live trading."
     required: true
 
+# ─── Phase 7.5 follow-up C — options-specific gate criteria ──────────
+# These additional criteria gate LIVE option orders (paper options are
+# unrestricted). The equity gate above still applies; this is additive.
+# Evaluated only when a live option order is attempted.
+options_criteria:
+  # User must have placed at least this many paper option orders in the
+  # sandbox before being allowed to submit live option orders.
+  paper_option_trades:
+    label: "Paper option trades completed"
+    description: "Practiced enough option trades in the sandbox to understand the mechanics."
+    min_count: 10
+
+  # User's Alpaca account must be approved at (or above) this options
+  # trading level. Alpaca levels:
+  #   1 = covered calls / cash-secured puts
+  #   2 = Level 1 + long calls / long puts
+  #   3 = Levels 1-2 + spreads (multi-leg strategies)
+  # Live single-leg requires Level 2; multi-leg requires Level 3. The
+  # gate queries /v2/account/configurations at runtime.
+  alpaca_approval_level:
+    label: "Alpaca options approval tier"
+    description: "Your broker account is approved for options trading at the appropriate level."
+    min_level_single_leg: 2
+    min_level_multi_leg: 3
+
+# Options risk-disclosure addendum — appended to the main disclosure
+# when the user first attempts a live option order. Operators should
+# replace with legal-counsel-reviewed language before production.
+options_risk_disclosure:
+  heading: "Additional risks of options trading"
+  text: |
+    Options trading carries significantly greater risk than stock trading.
+
+    An option is a contract that may expire worthless — you can lose
+    100% of the premium paid on a single trade in days or hours.
+
+    SHORT options (selling to open) can carry UNCAPPED LOSSES. A naked
+    short call has theoretically unlimited downside if the stock rises;
+    a short put can cost up to strike × 100 × contracts if the stock
+    goes to zero.
+
+    Each standard equity option contract represents 100 shares. A
+    single-contract move can produce outsized P&L swings vs the
+    underlying stock.
+
+    Assignment risk is real: a short option holder may be forced to
+    buy or sell 100 shares at the strike at any time (American-style
+    options). You may not have the cash or shares to deliver.
+
+    Implied volatility crush after earnings can erase long option
+    value even when your directional view is correct.
+
+    Spreads and multi-leg strategies can appear to have defined risk
+    but still carry pin risk, early-assignment risk, and liquidity risk.
+
+    By acknowledging this disclosure, you confirm that you have read
+    and understood the above, and you accept sole responsibility for
+    every live option order you submit.
+
 # Copy shown in the risk-disclosure modal. Replace with legal-reviewed
 # language before production (see top-of-file note). Plain text; newlines
 # render as paragraph breaks in the modal.

{icdev-1.2.20 → icdev-1.2.21}/icdev/data/args/innovation_config.yaml

@@ -227,6 +227,36 @@ signal_categories:
     priority_boost: 1.1
     auto_triage: true
     notes: "Detected by introspective analyzer every 12 hours. Auto-fixable via tools/compat/cli_harmonizer.py"
+  digital_twin:
+    keywords: [digital twin, digital-twin, Eclipse Ditto, Azure Digital Twins, AWS IoT TwinMaker, what-if simulation, Monte Carlo, pre-apply gate, compliance snapshot, continuous ATO, cATO, model-based, network verification, intent-based networking, path verification]
+    priority_boost: 1.3
+    auto_triage: true
+    notes: "Feeds ICDEV's 7-canvas digital-twin suite (NDC/SDC/PDC/BDC/DDC/ODC/IDC)"
+  breach_attack_simulation:
+    keywords: [attack path, attack graph, breach and attack simulation, BAS, Caldera, AttackIQ, Cymulate, XM Cyber, SafeBreach, Mandiant Security Validation, Stratus Red Team, Atomic Red Team, adversary emulation, purple team, red team automation, lateral movement path]
+    priority_boost: 1.3
+    auto_triage: true
+    notes: "Feeds SDC (Security Design Canvas) attack-path twin"
+  data_lineage:
+    keywords: [data lineage, column lineage, OpenLineage, Marquez, DataHub, Atlan, Collibra, Alation, Apache Atlas, Amundsen, Unity Catalog, OpenMetadata, data contract, active metadata, data catalog, schema registry, lineage graph, provenance]
+    priority_boost: 1.3
+    auto_triage: true
+    notes: "Feeds DDC (Data Design Canvas) lineage engine"
+  iac_drift:
+    keywords: [terraform drift, terraform plan, pre-apply gate, OpenTofu, Pulumi, Spacelift, env0, Firefly, Terrateam, Atlantis, Scalr, tfautomv, tfmigrate, cloud drift, config drift, CSP drift, CloudFormation drift, infrastructure drift]
+    priority_boost: 1.2
+    auto_triage: true
+    notes: "Feeds IDC (Infrastructure Design Canvas) pre-apply + drift engines"
+  detection_engineering:
+    keywords: [Sigma rule, SigmaHQ, detection engineering, detection-as-code, SIEM rule, Splunk SPL, Elastic KQL, Sentinel KQL, MITRE coverage, attack-navigator, D3FEND, Tidal Cyber, SOC Prime, Panther, Anvilogic, hayabusa, chainsaw, threat hunting, OpenTelemetry detection]
+    priority_boost: 1.3
+    auto_triage: true
+    notes: "Feeds ODC (Observability Design Canvas) MITRE coverage + Sigma generator"
+  sbom_supply_chain:
+    keywords: [SBOM, CycloneDX, SPDX, SLSA, in-toto, Sigstore, bomber, bomfather, sbom-tool, Syft, Grype, Trivy image, provenance attestation, supply chain attack, package poisoning, build provenance]
+    priority_boost: 1.3
+    auto_triage: true
+    notes: "Feeds BDC (Boundary Canvas) supply-chain + SBOM graph"
 
 # =========================================================================
 # Innovation Scoring (D21-style weighted average)

icdev-1.2.21/icdev/data/args/nist_au_crosswalk.yaml

@@ -0,0 +1,207 @@
+# CUI // SP-CTI
+# NIST 800-53 AU (Audit + Accountability) control crosswalk — Phase 7+.
+#
+# Maps each of AlphaDesk's append-only audit tables to the NIST 800-53
+# rev5 Audit & Accountability controls it contributes toward.
+#
+# Used by `tools/trading/compliance/audit_aggregator.py` for:
+#   1. Driving the unified audit viewer on /compliance — defines which
+#      tables to query + how to normalize their rows into the common
+#      {source, timestamp, user_id, action, detail, severity} shape.
+#   2. Rendering the NIST crosswalk view — operators can see which
+#      controls their deployment's audit trail satisfies at a glance.
+#
+# Control references:
+#   AU-2  Event Logging
+#   AU-3  Content of Audit Records
+#   AU-4  Audit Log Storage Capacity
+#   AU-6  Audit Review, Analysis, and Reporting
+#   AU-9  Protection of Audit Information
+#   AU-11 Audit Record Retention
+#   AU-12 Audit Generation
+#
+# Note: this is a DOCUMENTATION + DISCOVERY aid. It does not implement
+# the controls — the controls are implemented by the tables themselves
+# being append-only (enforced by `.claude/hooks/pre_tool_use.py`).
+
+_schema_version: 1
+
+# Enumerated event categories used to normalize heterogeneous row
+# schemas into a single viewer. Keep this list synced with the
+# aggregator code.
+categories:
+  authentication: {label: "Authentication", severity_default: "info"}
+  authorization:  {label: "Authorization",  severity_default: "info"}
+  credential:     {label: "Credentials",    severity_default: "info"}
+  billing:        {label: "Billing",        severity_default: "info"}
+  trading:        {label: "Trading",        severity_default: "info"}
+  admin:          {label: "Admin",          severity_default: "warning"}
+  gamification:   {label: "Gamification",   severity_default: "info"}
+  governance:     {label: "Governance",     severity_default: "warning"}
+
+# Table registry — order matters (defines default presentation order).
+tables:
+
+  audit_trail:
+    label: "Core audit trail"
+    category: governance
+    description: >-
+      Catch-all audit trail for administrative actions + security events
+      not captured by a domain-specific table.
+    columns:
+      timestamp: created_at
+      user_id: user_id
+      action: action
+      detail: payload
+    nist_controls: [AU-2, AU-3, AU-6, AU-12]
+
+  ad_credential_audit:
+    label: "BYOK credential audit"
+    category: credential
+    description: >-
+      Every set/delete/test/used/decrypt_error on a user's stored API
+      credentials (Anthropic, OpenAI, Alpaca, Ollama). Supports BYOK
+      Path A (operator KEK) and Path B (user-vault) both.
+    columns:
+      timestamp: created_at
+      user_id: user_id
+      action: action
+      detail: detail
+      severity_hint: success
+    nist_controls: [AU-2, AU-3, AU-12, SI-4]
+
+  ad_stripe_events:
+    label: "Stripe webhook events"
+    category: billing
+    description: >-
+      Every Stripe webhook we've processed — subscription lifecycle,
+      invoice events, payment failures. Idempotency ledger.
+    columns:
+      timestamp: processed_at
+      user_id: tenant_id           # Stripe events are tenant-scoped
+      action: event_type
+      detail: result
+    nist_controls: [AU-2, AU-3, AU-12]
+
+  ad_mfa_attempts:
+    label: "MFA verification attempts"
+    category: authentication
+    description: >-
+      Every TOTP / backup-code verification attempt. Used for lockout
+      tracking + forensics. Rate-limited 5 attempts / 15 minutes.
+    columns:
+      timestamp: attempted_at
+      user_id: user_id
+      action: attempt_type
+      detail: succeeded
+      severity_hint: succeeded
+    nist_controls: [AU-2, AU-6, IA-2, AC-7]
+
+  ad_password_reset_tokens:
+    label: "Password reset tokens"
+    category: authentication
+    description: >-
+      30-minute single-use password reset links. Created on
+      forgot-password, used when the user clicks the link. No-enumeration
+      response discipline.
+    columns:
+      timestamp: created_at
+      user_id: user_id
+      action: action_type
+      detail: used_at
+    nist_controls: [AU-2, IA-5]
+
+  ad_tenant_invitations:
+    label: "Tenant invitations"
+    category: authorization
+    description: >-
+      Invitation tokens generated for tenant membership. Single-use,
+      7-day TTL, sha256-hashed. Tracks accept + revoke events via
+      status-flip timestamps.
+    columns:
+      timestamp: created_at
+      user_id: invited_by
+      action: action_type
+      detail: email
+    nist_controls: [AU-2, AC-2, AC-5]
+
+  ad_trade_audit:
+    label: "Auto-trading audit"
+    category: trading
+    description: >-
+      Every auto-trading decision — signal approved, order submitted,
+      order rejected, kill-switch tripped. Immutable for post-incident
+      review.
+    columns:
+      timestamp: created_at
+      user_id: actor
+      action: action
+      detail: payload
+    nist_controls: [AU-2, AU-3, AU-12]
+
+  ad_xp_events:
+    label: "Gamification XP events"
+    category: gamification
+    description: >-
+      Every XP grant / achievement bonus event. Keeps gamification
+      anti-fraud-auditable (replay via dedup_key, daily caps, etc.).
+    columns:
+      timestamp: created_at
+      user_id: user_id
+      action: reason
+      detail: amount
+    nist_controls: [AU-2, AU-12]
+
+  ad_user_achievements:
+    label: "Badges earned"
+    category: gamification
+    description: >-
+      Immutable ledger of earned achievements. UNIQUE (user_id, achievement_id)
+      prevents double-earns.
+    columns:
+      timestamp: earned_at
+      user_id: user_id
+      action: achievement_id
+      detail: xp_bonus
+    nist_controls: [AU-2, AU-12]
+
+  ad_sandbox_orders:
+    label: "Sandbox paper fills"
+    category: trading
+    description: >-
+      Every paper-sim order fill in a challenge sandbox. Append-only —
+      rewrites would corrupt P&L math + short-sell margin audit.
+      Phase 7.5: asset_class column distinguishes equity vs option fills,
+      multileg_group_id links legs of a multi-leg strategy.
+    columns:
+      timestamp: filled_at
+      user_id: user_id
+      action: side
+      detail: ticker
+    nist_controls: [AU-2, AU-12]
+
+  ad_sandbox_daily_snapshots:
+    label: "Sandbox daily snapshots"
+    category: trading
+    description: >-
+      One point-in-time snapshot per (attempt, day). Feeds continuously-
+      held predicates + Sharpe-future. Idempotent per day.
+    columns:
+      timestamp: snapshot_date
+      user_id: user_id
+      action: "daily_snapshot"
+      detail: total_value
+    nist_controls: [AU-2, AU-4]
+
+  hook_events:
+    label: "Agent hook events"
+    category: governance
+    description: >-
+      AlphaDesk daemon-level hook invocations (pre-tool, post-tool,
+      notifications). HMAC-signed per Phase 39 observability.
+    columns:
+      timestamp: created_at
+      user_id: user_id
+      action: hook_name
+      detail: summary
+    nist_controls: [AU-2, AU-9, AU-12]

icdev-1.2.21/icdev/data/args/options_coach_thresholds.yaml

@@ -0,0 +1,27 @@
+# CUI // SP-CTI
+# AlphaDesk Phase 7.6 — coach rule thresholds.
+#
+# Consumed by tools/trading/options/coach_engine.py. All values are
+# operator-tunable. Hot-reloadable via mtime.
+
+_schema_version: 1
+
+# Profit-target trigger — emit when unrealized P&L crosses this fraction
+# of the original max-profit estimate.
+profit_target_fraction: 0.50      # 50% of max_profit → 'profit_target'
+
+# Loss threshold — emit when loss exceeds N× the credit received (for
+# short-premium plays) or N× the debit paid (long-premium).
+loss_threshold_mult: 2.0
+
+# DTE warnings.
+dte_warning_days: 7               # "expires in ≤ 7 days"
+dte_roll_window_days: 21          # "consider rolling" (still > warning)
+
+# IV crush — emit when IV has fallen by ≥ this many percentage points
+# since the position was opened.
+iv_crush_pct: 20
+
+# Dedupe window — don't re-emit the same event type for the same
+# position inside this many hours (escalation still allowed).
+dedupe_hours: 24